gs101-sepolicy: Fix avc denial for sysfs_vendor_sched

Fix mediaprovider_app and bluetooth

Bug: 190563839
Bug: 190563916
Test: build pass
Change-Id: I477325ee812d1362db4d5005e999cba989a44216
This commit is contained in:
Rick Yiu 2021-06-10 11:30:11 +08:00
parent 22fae537b5
commit 797b646234
6 changed files with 15 additions and 9 deletions

View file

@ -37,3 +37,6 @@ BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_sniffer
# Wifi Logger
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_logger
# Public
PRODUCT_PUBLIC_SEPOLICY_DIRS += device/google/gs101-sepolicy/public

View file

@ -0,0 +1,2 @@
dontaudit mediaprovider_app sysfs_vendor_sched:dir search;

7
public/file.te Normal file
View file

@ -0,0 +1,7 @@
# Vendor sched files
type sysfs_vendor_sched, sysfs_type, fs_type;
userdebug_or_eng(`
typeattribute sysfs_vendor_sched mlstrustedobject;
')
type proc_vendor_sched, proc_type, fs_type;

View file

@ -1,2 +0,0 @@
# b/190563916
dontaudit bluetooth sysfs_vendor_sched:dir search;

View file

@ -0,0 +1,3 @@
allow bluetooth sysfs_vendor_sched:dir search;
allow bluetooth sysfs_vendor_sched:file w_file_perms;

View file

@ -134,13 +134,6 @@ type vendor_camera_tuning_file, vendor_file_type, file_type;
type vendor_camera_data_file, file_type, data_file_type;
type sysfs_camera, sysfs_type, fs_type;
# Vendor sched files
type sysfs_vendor_sched, sysfs_type, fs_type;
userdebug_or_eng(`
typeattribute sysfs_vendor_sched mlstrustedobject;
')
type proc_vendor_sched, proc_type, fs_type;
# GPS
type vendor_gps_file, file_type, data_file_type;
userdebug_or_eng(`